You can automate potential matches on the CVEs, but it almost always requires manual follow-up to check if your configuration is vulnerable.